Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1eb3c70b-6a13-312b-a011-6519aea21742.roa
File:                     1eb3c70b-6a13-312b-a011-6519aea21742.roa (raw, json)
Hash identifier:          JTam0tlcIvL+NJPlQemZu6avye7CPDe4pB2MA7Q8zIs=
Subject key identifier:   BE:34:DB:66:F7:03:92:69:7B:53:34:FD:4F:A0:A6:F5:DF:0C:21:92
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584CDC67D5A411379DB27FA80C40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1eb3c70b-6a13-312b-a011-6519aea21742.roa
Signing time:             Sat 14 Feb 2026 14:00:41 +0000
ROA not before:           Sat 14 Feb 2026 14:00:41 +0000
ROA not after:            Fri 15 May 2026 13:00:41 +0000
asID:                     6167
IP address blocks:        2600:1001:b0e0::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dc:67:d5:a4:11:37:9d:b2:7f:a8:0c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 14 14:00:41 2026 GMT
            Not After : May 15 13:00:41 2026 GMT
        Subject: CN=09822c60-075a-457f-bdbb-11e7d1b77e51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:24:9a:57:65:f0:48:9b:38:13:84:5d:94:fc:
                    65:e1:c5:74:09:47:c4:ad:e0:20:f3:d5:79:7b:ca:
                    62:59:13:81:fa:92:7a:e5:f6:65:99:d9:6f:5a:80:
                    d7:20:93:89:c4:f0:96:d0:72:c7:84:e7:c5:98:0b:
                    75:3f:e2:6c:8b:85:de:77:c9:be:d5:2d:b5:e2:0a:
                    ce:be:12:f5:06:ba:08:03:39:67:6d:f0:32:42:b7:
                    3d:6b:54:78:2d:3d:2d:85:95:60:1a:90:ef:cf:d7:
                    27:f8:d5:78:84:f0:cd:ad:7e:e1:e5:86:dd:68:b9:
                    cc:ee:7d:4b:98:c9:11:68:12:58:a1:e5:90:73:1b:
                    01:df:ac:1e:02:ed:4d:1c:19:e5:03:72:32:78:01:
                    b7:a8:ba:06:e2:ba:af:83:96:f1:48:e1:fe:c7:16:
                    90:b3:33:30:a3:6a:81:c4:43:f7:c4:5d:4a:e1:ee:
                    12:51:38:ac:2b:d6:ba:a3:c6:4f:8e:ca:4b:14:2c:
                    87:b0:ea:14:2d:87:16:49:12:a5:b3:62:7a:37:cd:
                    67:2d:11:a8:7f:98:ce:b9:5a:a4:6b:3c:e4:1c:75:
                    d3:0e:5f:ed:e4:71:e5:d5:3f:87:a4:a4:6d:d2:17:
                    23:59:bf:eb:2d:73:71:2b:41:01:62:cd:db:8d:0d:
                    11:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:34:DB:66:F7:03:92:69:7B:53:34:FD:4F:A0:A6:F5:DF:0C:21:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1eb3c70b-6a13-312b-a011-6519aea21742.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1001:b0e0::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:d7:9c:8f:5b:f2:d3:14:b9:05:cb:bf:84:e2:00:e8:68:73:
         0d:1f:d6:e4:7f:d0:1a:c5:66:b7:c6:9c:5a:ce:e6:f0:7f:05:
         53:3b:cb:3c:d9:3c:67:53:e3:12:0e:9f:75:60:58:bc:1c:b2:
         91:1f:77:71:05:b5:da:5e:5f:72:2a:ff:9a:f4:a2:da:09:7e:
         de:c6:0d:bc:c8:5a:d0:26:b3:1f:a5:f5:10:ff:b2:bd:4c:ba:
         8e:e1:57:d4:f7:6d:76:e2:e9:d5:d6:ba:11:20:b3:4e:6a:7c:
         c2:19:6b:ce:04:0e:46:4c:65:fa:65:ae:e9:a5:ed:e1:aa:21:
         7a:d0:5e:f7:b2:90:4b:53:79:31:d7:5e:ba:e9:f8:1f:10:24:
         4a:f9:a4:ee:d3:d1:11:c9:ab:b4:6b:2b:e4:15:7c:d4:2d:4a:
         eb:e0:fa:af:a1:60:be:e3:de:1d:da:ab:05:b6:6d:1d:7b:19:
         96:93:1f:97:20:57:22:79:16:81:ad:c4:7c:c5:0a:68:50:3b:
         ab:07:15:55:7a:c5:29:e5:63:b2:48:63:60:f8:23:7e:b4:b1:
         93:3a:b8:ab:7b:d5:94:57:1e:80:37:d6:39:fa:ee:0d:4d:3b:
         61:14:1b:58:07:31:52:f9:8c:5d:e7:e8:b7:c1:be:db:9e:52:
         ad:50:35:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:13:26 2026 by rpki-client